Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File: F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier: C9PBlUShyJFo19hHQBYqXYVuz/oVyW6HNqNska9XHFM=
Subject key identifier: 38:63:DE:C5:6C:7E:9F:1D:7A:E6:6A:51:9B:6F:5E:FA:EF:E0:2E:12
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer: /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial: 0199FC8FA3119B5F0912B2798043DB0E348B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number: 0DEF
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: LmUOumJdS8W8eFlbxUNKbUcdQOEFVXNdf1/Avjc7BR8=)
2: KNcCODBaDX2MFgjxBHddnmeDs1w.roa (hash: v5RHpNNKwnL8+b9d7xhZwKkWy+NYX2Itp+tps9r7KV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a3:11:9b:5f:09:12:b2:79:80:43:db:0e:34:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=3863dec56c7e9f1d7ae66a519b6f5efaefe02e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:e5:99:9f:3d:24:ee:ea:e8:46:98:9b:76:
c1:b9:3a:d6:95:02:11:0f:0e:7a:33:11:d1:d0:96:
8d:b6:df:e8:06:00:88:6f:ea:96:d6:ae:f6:c5:09:
5e:ad:8c:c2:2f:82:ab:b4:32:9e:5a:d1:3b:73:4f:
3b:3b:39:f5:a3:d3:c7:07:42:5a:b5:a2:38:59:85:
51:bf:9b:55:d3:e9:65:1e:6e:6e:da:94:fd:d4:2c:
ad:a5:2b:f3:09:92:99:98:32:93:47:c1:5d:c8:f1:
39:15:be:d1:7f:d7:17:ee:20:d6:55:a7:14:86:11:
ce:86:b3:ef:70:2a:74:75:f3:de:b2:ff:eb:be:40:
51:df:89:8f:2b:62:c7:f9:25:65:f5:29:c0:8b:de:
d4:8a:53:9a:18:33:60:7d:9d:2e:76:12:51:61:ae:
fb:be:fd:3a:59:42:a9:49:4d:3f:7f:28:e3:5f:f6:
50:13:f7:36:9f:80:86:d0:24:9e:83:36:71:39:b2:
b7:a2:02:52:9b:f1:79:be:a7:4e:8a:da:3d:e1:75:
fe:57:3c:67:b2:ab:ce:5e:cb:39:84:07:3b:5a:69:
b5:d6:f0:94:85:e5:3e:81:d8:b0:d7:7b:24:88:52:
9e:52:80:32:f2:ea:80:44:58:57:4c:f2:ee:90:f6:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:DE:C5:6C:7E:9F:1D:7A:E6:6A:51:9B:6F:5E:FA:EF:E0:2E:12
X509v3 Authority Key Identifier:
keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:35:77:56:b3:e2:8f:fc:d4:8b:77:06:ae:07:6e:57:b9:3d:
28:fa:60:68:b6:76:8e:03:ad:0a:9b:5f:59:cb:97:ca:5e:4d:
3c:85:48:36:cd:8b:03:f2:01:96:b9:78:46:e6:be:03:e1:33:
71:a6:8d:92:a2:46:56:38:24:4c:bd:45:f9:c8:80:6c:c6:fb:
54:9d:b0:9a:03:d3:8b:54:32:d2:c0:0c:6d:68:bf:79:b7:94:
54:46:23:e2:c3:c7:58:f6:59:a0:a7:59:cb:d7:41:f7:5c:31:
69:01:31:39:22:4a:ad:a2:e8:4e:ad:a1:93:cb:c3:e7:fd:09:
3c:e1:6b:86:74:b1:f3:30:13:a4:3a:34:ce:5b:e9:07:14:dd:
c3:b5:35:92:ea:7d:5e:2b:d7:23:ec:c6:61:d4:29:cf:3b:07:
0f:84:fb:d3:81:26:d9:76:55:11:2b:8c:15:14:95:3d:a1:04:
c6:a1:dc:8e:79:46:7a:1b:7d:1a:9f:28:9d:51:6a:b4:99:5a:
54:19:75:b3:ac:12:4e:1a:4b:47:a4:f6:8d:7f:3b:9d:ee:04:
da:f6:94:7a:37:5e:6b:59:a6:6e:f8:f7:69:bd:fd:b4:75:4b:
f2:1d:0a:53:9a:29:ca:55:31:b4:06:68:91:4f:b7:8b:6a:eb:
75:d9:e3:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j6MRm18JErJ5gEPbDjSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZGI4YmRmZjIyZTFhMzdiMGY0YTY5NTM0MjRiNjUxNjli
MDM0MjkwHhcNMjUxMDE5MTMwMTM1WhcNMjUxMDIwMTMwMTM1WjAzMTEwLwYDVQQD
EygzODYzZGVjNTZjN2U5ZjFkN2FlNjZhNTE5YjZmNWVmYWVmZTAyZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj07lmZ89JO7q6EaYm3bBuTrWlQIR
Dw56MxHR0JaNtt/oBgCIb+qW1q72xQlerYzCL4KrtDKeWtE7c087Ozn1o9PHB0Ja
taI4WYVRv5tV0+llHm5u2pT91CytpSvzCZKZmDKTR8FdyPE5Fb7Rf9cX7iDWVacU
hhHOhrPvcCp0dfPesv/rvkBR34mPK2LH+SVl9SnAi97UilOaGDNgfZ0udhJRYa77
vv06WUKpSU0/fyjjX/ZQE/c2n4CG0CSegzZxObK3ogJSm/F5vqdOito94XX+Vzxn
sqvOXss5hAc7Wmm11vCUheU+gdiw13skiFKeUoAy8uqARFhXTPLukPZGYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhj3sVsfp8deuZqUZtvXvrv4C4SMB8GA1UdIwQY
MBaAFBfbi9/yLho3sPSmlTQktlFpsDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAt
MzI3MDJkYmQ0YmM3LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAtMzI3MDJkYmQ0YmM3
LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjV3VrPi
j/zUi3cGrgduV7k9KPpgaLZ2jgOtCptfWcuXyl5NPIVINs2LA/IBlrl4Rua+A+Ez
caaNkqJGVjgkTL1F+ciAbMb7VJ2wmgPTi1Qy0sAMbWi/ebeUVEYj4sPHWPZZoKdZ
y9dB91wxaQExOSJKraLoTq2hk8vD5/0JPOFrhnSx8zATpDo0zlvpBxTdw7U1kup9
XivXI+zGYdQpzzsHD4T704Em2XZVESuMFRSVPaEExqHcjnlGeht9Gp8onVFqtJla
VBl1s6wSThpLR6T2jX87ne4E2vaUejdea1mmbvj3ab39tHVL8h0KU5opylUxtAZo
kU+3i2rrddnjcw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:44 2025 by rpki-client